@iuvi this seems like a good way to do it at first glance.

• Granted I've not used #sshuttle myself, but I found a decently written #howto for #SSHtunneling.
• Also @nixCraft made a good post explaining #SSHtunnels and also some even more condensed writeup to get you started.
  • Obviously you need a #Server on the "outside" of the #IronFirewall of #Roskomnadzor's realm, but any #VPS with decent bandwith should work.

I'd still recommend to use @torproject / #TorBrowser through that #SSHtunnel for added #privacy.

• OFC for applications that need #UDP and/or don't like #Tor you'd still be able to use them regardless, but for #Messaging like #XMPP+#OMEMO (@monocles / #monoclesChat, @gajim), #IRC & #PGP/MIME (i.e. @delta & @thunderbird) tor just works.
  • I wished @tails_live / @tails / #Tails would've support for #SSHtunnels built-in for extra-hard cases when even private #Bridges ain't an option.

Still #Russia fighting against #VPN useage whilst also being reliant on #CyberCrime & #CyberWarfare from russian soil makes it basically impossible to ban #SSH.

• After all, this would also prevent their agents from communicating since #Gonets¹ and Gazprom Space Systems either don't have global coverage or are too slow to be used for any decent communication resembling realtime beyond narrowband communication.

@dw_innovation @WIRED granted, #VPNs have severe limitations when it comes to #privacy and #security.

• Most notably when your #VPN is close by to the authorities or your #hoster is known to snitch or shutdown services without a duely issued warrant...

For the most part, getting #Journalists setup with @tails_live / @tails / #Tails, maybe a custom/private @torproject / #TorBridge and at worst a private #SSHtunnel to circumvent "#GreatFirewall|s" is the way to go.

• And in extreme cases like #NorthKorea, it's propably better to setup a #SneakerNet like #RimjinGang did...

@ai6yr

I don't think you would necessarily have to disable anything to access the GUI from localhost. Which is what you would be doing with an SSH tunnel.

Adding a password and forcing HTTPS should then be done before changing the configuration to allow access to the GUI from the network.

https://docs.syncthing.net/users/guilisten.html

#syncthing #ssh #sshtunnel

@ai6yr

Port Forwarding for Headless Machines

"My main use case for tunneling has been to access the web gui of my primary Syncthing node but SSH tunneling can be used for any other program presents data from a specific port on a remote machine."
With thanks to the author

https://www.jm.technology/post/ssh_tunneling_april_2019/

#sshtunnel #syncthing #ssh